easyMultiple Select
ISC2 CC Practice Question: Which TWO of the following are core principles of…
Which TWO of the following are core principles of the CIA triad?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Integrity
The CIA triad consists of Confidentiality, Integrity, and Availability. Options A and C are correct. Option B (Non-repudiation) is separate. Option D (Authentication) is separate. Option E (Authorization) is separate.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Integrity
Why this is correct
Integrity ensures data remains accurate and unaltered unless changed by authorised processes, directly satisfying the CIA triad's requirement for trustworthy information. It guards against unauthorised modification, whether accidental or malicious, complementing confidentiality and availability as one of the three foundational security principles the question asks you to identify.
- ✗
Non-repudiation
Why it's wrong here
Non-repudiation proves an action occurred and cannot be denied, which is not part of the CIA triad. It tempts because it appears in security models and is often grouped with integrity, but it is a separate assurance property rather than one of confidentiality, integrity or availability.
- ✓
Confidentiality
Why this is correct
Confidentiality is a core CIA triad principle, ensuring data is accessible only to authorised parties. It directly satisfies the stem's requirement by preventing unauthorised disclosure through mechanisms such as encryption, access controls and data classification. Alongside integrity and availability, it forms the triad's foundational security objectives.
- ✗
Authorization
Why it's wrong here
Authorization determines what an authenticated subject may access and is not one of the CIA triad's three principles. It tempts because it pairs naturally with authentication in access-control discussions, yet it governs permissions rather than protecting confidentiality, integrity or availability directly.
- ✗
Authentication
Why it's wrong here
Authentication verifies an identity's claimed credentials and sits outside the CIA triad, which comprises confidentiality, integrity and availability. It tempts because authentication underpins access control and appears in most security frameworks, but it is an identity assurance mechanism rather than an information protection goal.
Go deeper
Related to this question
Learn chapter
Introduction to Security Principles
Key term
Integrity
Integrity is the assurance that data has not been altered or tampered with in an unauthorized way, preserving its accuracy and consistency from source to destination.
Key term
Availability
Availability is the measure of how often a system or service is operational and accessible when needed, typically expressed as a percentage of uptime.
About these practice questions
This CC question is part of Courseiva's 989-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.